DHCP Pass throught

RouterOS Beginner Basics
1

Hi All

First time toying around with routerboard and such. have an hAP Lite AC. Followed these instructions https://wiki.mikrotik.com/wiki/Connect_to_an_Available_Wireless_Network for getting it most of the way to what I’m wanting to achieve, but unsure if it’s possible to pass a DHCP adress from an external server to a device.

Unifi USG (router) _____ Unifi Switch _____ Unifi AP ----- Mikrotik hAP _____ Devices
_____ = Wired
----- = Wireless

So I can connect and access the outside world from the devices successfully, but they get an IP from the hAP and not from the USG.
I’ve had a play about on the hAP but sort of blindly stabbing at bees. Any help would be awesome.

Cheers
zz

2

Does hAP ac lite have default configuration? If it is so, then ether1 have dhcp-client with masquerade rule. You can remove all the configuration and create a simple bridge with wlan1 and ethernet interfaces, then your “Devices” will see through the hAP ac and will obtain IP from “USG”.

3

Thanks arturs for your response
Yes it does have a default config.

I must be missing a step still as when I disable the DHCP server and attempt to connect a device I don’t receive an address.
So, I removed the WLAN adapter from the bridge so I can create a DHCP client to get an address from my existing network
Removed NAT Masquerade Rule
Set WLAN to Station Mode, it connects and is given an IP
If I have the DHCP server going on the mikrotik I get an address from that pool and can access the internet
If I remove the DHCP server an address is not received.

Small notes;
Using WLAN2 for a 5GHz backhaul

Anythings smarts that needs to be done at the other end? Have tried on another external network / router with no luck.

Thanks,
zz

4

If you like the Unifi USG router to be your main router Default GW/DHCP ++
Go to Quick set on your MT device and set it to Bridge mode.

5

If I understand this correctly…
The hAP is a “Wireless Bridge” to the UniFi WAP?

You are using the 5Ghz radio to connect the hAP to the UniFi WAP’s 5GHZ radio SSID?

You want devices connected to the hAP to “get an IP from the UniFi router and be in that subnet”?

Once you connect the hAP AC to the UniFi WAP’s SSID… you are looking to bridge.
So DHCP-Server should be off.
Firewall off
NAT off
dhcp-client should be on your bridge

Post your export.

6

Sorry team, busy week, away, sick, all sorts.

The hAP is a "Wireless Bridge" to the UniFi WAP?

Yes

You are using the 5Ghz radio to connect the hAP to the UniFi WAP's 5GHZ radio SSID?

Oh yes

You want devices connected to the hAP to "get an IP from the UniFi router and be in that subnet"?

Nailed it.

WLAN 2 is the 5Ghz card.
Obviously changed a few things and passwords because I don't want people to know I set the password to "password" :laughing:

So the bridge is getting an IP in the right range, but still no devices connected to the mikrotik are getting a DHCP address from Unifi. Here's the export from the router;

aug/18/2018 21:50:23 by RouterOS 6.42.6

software id = ZAUW-2DPA

model = RouterBOARD 952Ui-5ac2nD

serial number = mySerialNumber

/interface bridge
add fast-forward=no name=bridge1

/interface wireless security-profiles
set [ find default=yes ] supplicant-identity=MikroTik
add authentication-types=wpa2-psk eap-methods="" group-ciphers=tkip,aes-ccm
management-protection=allowed mode=dynamic-keys name=secProfile
supplicant-identity="" unicast-ciphers=tkip,aes-ccm wpa2-pre-shared-key=
[myWifiPassword]

/interface wireless
set [ find default-name=wlan2 ] band=5ghz-a/n/ac channel-width=20/40mhz-Ce
disabled=no security-profile=secProfile ssid=myWirelessNetwork

/ip hotspot profile
set [ find default=yes ] html-directory=flash/hotspot

/interface bridge port
add bridge=bridge1 comment=WIRED: interface=ether1
add bridge=bridge1 interface=ether2
add bridge=bridge1 interface=ether3
add bridge=bridge1 interface=ether4
add bridge=bridge1 interface=ether5
add bridge=bridge1 comment=WLAN: interface=wlan1
add bridge=bridge1 interface=wlan2

/ip dhcp-client
add dhcp-options=hostname,clientid disabled=no interface=bridge1

/ip dns
set allow-remote-requests=yes servers=8.8.8.8

/system clock
set time-zone-name=Pacific/Auckland

/system routerboard settings
set silent-boot=no